Here is the condition: I have a web service API that I am planning to sell as a service. The output of the API contains URI of some resources (say images, videos) that should be accessible to that guy using API.
Exposing URI as is, seems like a bad idea since they can just visit that resource and navigate through.
What I tried?
Selective Passsword protecting the URI resources from apache server configuration. But this would prevent every client from displaying those resources.
What others are doing?
I just looked at how facebook was doing this and it seems they have some sort of encrypted URL for image resources.
Following is an example I got from Barack Obama's FB page:
How do I achieve this level of security? what are the standard practices and how should I go about implementing them? Any leads would be appreciated!!